Try our new research platform with insights from 80,000+ expert users

SonicWall Capture Advanced Threat Protection vs Trellix Advanced Threat Defense comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 1, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

SonicWall Capture Advanced ...
Ranking in Advanced Threat Protection (ATP)
23rd
Average Rating
8.0
Reviews Sentiment
7.4
Number of Reviews
9
Ranking in other categories
No ranking in other categories
Trellix Advanced Threat Def...
Ranking in Advanced Threat Protection (ATP)
22nd
Average Rating
7.8
Reviews Sentiment
5.6
Number of Reviews
9
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of January 2026, in the Advanced Threat Protection (ATP) category, the mindshare of SonicWall Capture Advanced Threat Protection is 1.6%, up from 0.9% compared to the previous year. The mindshare of Trellix Advanced Threat Defense is 1.9%, up from 1.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Advanced Threat Protection (ATP) Market Share Distribution
ProductMarket Share (%)
Trellix Advanced Threat Defense1.9%
SonicWall Capture Advanced Threat Protection1.6%
Other96.5%
Advanced Threat Protection (ATP)
 

Featured Reviews

Mohamed Fouad - PeerSpot reviewer
Cybersecurity Team Leader at EMAK For Integrated Solutions
Advanced sandboxing has protected our environment and stops unknown threats in real time
The most capable feature of SonicWall Capture Advanced Threat Protection is the accurate verdict of the file, and I have used many other types of sandboxing, but using SonicWall Capture Advanced Threat Protection is truly helpful for our organization. In my experience, the best features SonicWall Capture Advanced Threat Protection offers include accuracy for the submitted files, and one of the most valued features is its usability, as it is so usable and helpful to integrate with other solutions, making it a fantastic product overall. It is easy to set up and connect SonicWall Capture Advanced Threat Protection with other solutions, as it can be integrated with many products, supporting real-time memory inspection, rapid signature deployment, broad file type support, and block until verdict capability, along with flexible configuration, while providing comprehensive reporting. SonicWall Capture Advanced Threat Protection supports sandbox evasion techniques, which is important since sophisticated malware increases the evasion capability to detect and deceive sandboxing environments. SonicWall employs deception techniques simulating user interaction or fake high volume targets to determine when custom malware can still potentially bypass detection through environment-aware code. SonicWall Capture Advanced Threat Protection positively impacts our organization by helping us stop advanced persistent threats, as we have defined our targeted adversaries and increased security for our organization.
PP
RSSI at SDIS49
Ensuring long-term reliability while seeking internal email management enhancements
Prisma is a commercial name of the firewall now, but we don't work with the cloud product. Only our company is using it and we do not recommend it to customers. For us, it's transparent because it's a cloud product, so we don't really know the version as it's always updated. We have not had any problem, but it's difficult to report on what's going on because some days they can wash out perhaps 100 mails, and then it's difficult to say how many attacks you have reached. The right email has been washed out and then nobody has complained. We do not use the Threat Visualization feature; as we are in MX, the mail is washed out before it is in the mail inbox of the user, thus avoiding any problem requiring a reservation. In fact, there is no integration with existing security frameworks. The only problem we can have is that as we have no API interface, there is no inspection of internal mail. I rate Trellix Advanced Threat Defense a nine out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"In my experience, the best features SonicWall Capture Advanced Threat Protection offers include accuracy for the submitted files, and one of the most valued features is its usability, as it is so usable and helpful to integrate with other solutions, making it a fantastic product overall."
"It also has an easy configuration. The feedback that we get from our customers is that it's a good product."
"We use it for protection against viruses and ransomware attacks."
"The reporting that you get from it is the most valuable feature. You can see it via the appliance itself, and also via the MySonicWall account for the registered device. You are able to select the file if it's malicious, and you can select it in the reporting and see what triggered it, and things like that. I found that to be quite useful."
"The ATP (Advanced Threat Protection) on scanning is the most valuable feature."
"They have a large database of commonly known things that they can catch automatically, then they have anything which is questionable go to the sandbox and be examined there before going into our network."
"The stability of the solution is good. We haven't had any breaches or crashes. It's been very stable for us."
"I like this setup for a firewall. You can set things up very easily and you can automate items as well. It's a very robust firewall solution for enterprise as well as small businesses."
"The most valuable features are the administration console and its detection and response module."
"It stops in excess of twenty-five malware events per month, all of which could be critical to the business."
"It is very scalable."
"It is stable and reliable."
"Its greatest strength is the DXL client which can rapidly disseminate attack information to all clients via the McAfee Agent instead of going through the ePO server."
"Provides good exfiltration, and is an all-in-one product."
"The fact that in 10 years, we have had no problem is the most valuable feature for us; it's really a washing machine, but the only problem we face is that it's difficult to report on this product."
"I recommend this solution because of its ease of use."
 

Cons

"SonicWall had a recent layoff. This is a concern for us, because now we are missing the local presence from both the engineering and sales side."
"SonicWall Capture Advanced Threat Protection needs to reconsider the pricing, especially in the cloud environment."
"I would like to have better documentation before starting with deployment because the deployment is a bit complex."
"We would like to get immediate alerts from the alerting system without using third-parties."
"I would say the solution needs a much simpler user interface, but the functionality of the firewall is quite extensive. You need the user interface to be that way. However, if there was a way to make the user interface a little easier, that would be great."
"The setup needs improvement. It needs to be made more user-friendly."
"If anything at all, it would be some very minor updates that need to be done, but in terms of changes, nothing comes to mind."
"Having an on-premise solution as well would be an option for some people, but they'll want to use a cloud solution for their sandboxing. Certain sites would want to keep all the checks done on an on-premise appliance. All the checking, rather than sending that up into a cloud engine."
"Make the ATD system a part of the whole product and take the whole thing onto the cloud. While it is there already, it is not to the same level as the on-premise version."
"Lacks remote capabilities not dependent on the internet."
"This solution needs to be made "cloud ready"."
"I would like to see future versions of the solution incorporate artificial intelligence technology."
"The initial setup was industry standard complex. It takes awhile and has a lot of planning involved. It could be simplified with product redesign."
"The only problem we can have is that as we have no API interface, there is no inspection of internal mail."
"There could be a tool that automatically updates all-new Microsoft IPs, which are available for free to connect to the client."
"We'd like them to be better at dealing with script threats."
 

Pricing and Cost Advice

"It's thirty dollars per user and we have 30 users."
"When you compare it with other solutions, they are cheaper and more economical."
"The best deal from SonicWall is to buy the HA pair. When you buy the initial one, you receive the second one at a significant discount. If there is an event and something happens to one firewall, then you have the second firewall to roll into. For the price, it's pretty to tough to beat and not a lot of other firewall vendors offer it. You battle for a discount on both. Where with SonicWall, if you buy one, the second one is at half price. It's pretty straightforward."
"We get our value for our money."
"The product is expensive, but it is better than the rest of them in the industry."
"Our licensing fees for this solution are approximately one million dollars per year."
report
Use our free recommendation engine to learn which Advanced Threat Protection (ATP) solutions are best for your needs.
879,422 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
No data available
Government
14%
Comms Service Provider
13%
Performing Arts
11%
University
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business5
Midsize Enterprise3
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise4
Large Enterprise5
 

Questions from the Community

Ask a question
Earn 20 points
What do you like most about McAfee Advanced Threat Defense?
I recommend this solution because of its ease of use.
What needs improvement with McAfee Advanced Threat Defense?
I would like to see an API interface for internal email and control of outgoing email to make it closer to 10. It's necessary; today we have an MX interface, and it would be interesting to have an ...
What is your primary use case for McAfee Advanced Threat Defense?
We are working with Palo Alto products, specifically firewalls. We are only using Palo Alto Firewalls and not Cortex. With FireEye and Trellix, we only work with ETP now because the NDR function wh...
 

Also Known As

No data available
McAfee Advanced Threat Defense
 

Overview

 

Sample Customers

Wonder Cement, Foster Clark Products
The Radicati Group, Florida International University, MGM Resorts International, County Durham andDarlington NHS Foundation Trust
Find out what your peers are saying about SonicWall Capture Advanced Threat Protection vs. Trellix Advanced Threat Defense and other solutions. Updated: December 2025.
879,422 professionals have used our research since 2012.